@stacksjs/ts-cloud 0.7.82 → 0.7.84

package/dist/{chunk-900rezgt.js → chunk-838t87x3.js}

@@ -399,10 +399,9 @@ function buildMonitoringScript(monitoring = true) {
     "set -uo pipefail",
     `LOAD=$(cut -d' ' -f1 /proc/loadavg)`,
     "CPUS=$(nproc)",
-    `MEM_TOTAL=$(free -m | awk '/^Mem:/{print $2}')`,
-    `MEM_USED=$(free -m | awk '/^Mem:/{print $3}')`,
-    `SWAP_TOTAL=$(free -m | awk '/^Swap:/{print $2}')`,
-    `SWAP_USED=$(free -m | awk '/^Swap:/{print $3}')`,
+    `read MEM_TOTAL MEM_USED SWAP_TOTAL SWAP_USED <<EOF
+$(free -m | awk '/^Mem:/{total=$2; used=$3} /^Swap:/{print total, used, $2, $3}')
+EOF`,
     `DISK_PCT=$(df -P / | awk 'NR==2{gsub("%","",$5); print $5}')`,
     `UPTIME_SEC=$(cut -d' ' -f1 /proc/uptime | cut -d. -f1)`,
     `RX_BYTES=$(awk -F'[: ]+' 'NR>2 && $2!="lo"{rx+=$3} END{print rx+0}' /proc/net/dev)`,
@@ -1112,7 +1111,7 @@ function buildRpxConfigInternal(sites, options, appBoxes) {
   });
   const config = {
     proxies,
-    productionCerts: { certsDir },
+    productionCerts: { certsDir, certsDirServerNames: [...domains] },
     https: true,
     hostsManagement: false,
     cleanup: { hosts: false, certs: false }
@@ -1221,7 +1220,13 @@ for (const f of files) {
 }
 const config = {
   proxies,
-  productionCerts: { certsDir },
+  productionCerts: {
+    certsDir,
+    // A shared host's cert directory also contains mail and retired-site PEMs.
+    // Keep those files on disk for their owners, but do not turn them into live
+    // OpenSSL SNI contexts when no current route can select them.
+    certsDirServerNames: [...new Set(proxies.map(p => p.to).filter(Boolean))],
+  },
   https: true,
   hostsManagement: false,
   cleanup: { hosts: false, certs: false },
@@ -1390,7 +1395,10 @@ function buildRpxProvisionScript(options) {
 `), "TS_CLOUD_RPX_UNIT_EOF"),
     "systemctl daemon-reload",
     "systemctl disable --now bun-gateway.service 2>/dev/null || true",
+    "systemctl disable --now bun-gateway-renew.timer bun-gateway-renew.service 2>/dev/null || true",
+    "rm -f /etc/systemd/system/bun-gateway-renew.timer /etc/systemd/system/bun-gateway-renew.service",
     "systemctl disable --now ts-cloud-nginx.service 2>/dev/null || true",
+    `for timer in /etc/systemd/system/rpx-cert-renew-*.timer; do [ -e "$timer" ] || continue; unit="$(basename "$timer")"; tenant="\${unit#rpx-cert-renew-}"; tenant="\${tenant%.timer}"; [ -f "${RPX_SITES_DIR}/$tenant.json" ] && continue; systemctl disable --now "$unit" 2>/dev/null || true; rm -f "$timer" "/etc/systemd/system/rpx-cert-renew-$tenant.service" "${RPX_DIR}/renew-certs-$tenant.sh"; done`,
     `systemctl enable ${RPX_SERVICE_NAME}`,
     `systemctl restart ${RPX_SERVICE_NAME}`,
     ...buildCertManagementCommands(options)

package/dist/{chunk-hq03wq2p.js → chunk-8m38yfba.js}

@@ -45,7 +45,7 @@ import {
   resolveSiteKind,
   resolveUiSource,
   siteInstallBase
-} from "./chunk-900rezgt.js";
+} from "./chunk-838t87x3.js";
 import {
   artifactKey,
   buildCloudFormationTemplate,
@@ -38547,28 +38547,34 @@ for (const route of routes) console.log('DISCOVERED_SITE=' + Buffer.from(JSON.st
 const serviceOutput = Bun.spawnSync([
   'systemctl', 'list-units', '--type=service', '--state=running', '--no-legend', '--plain',
 ]).stdout.toString()
-for (const line of serviceOutput.split('\n')) {
-  const unit = line.trim().split(/\s+/)[0]
-  if (!unit) continue
-  const properties = Bun.spawnSync([
+const runningUnits = serviceOutput
+  .split('\n')
+  .map(line => line.trim().split(/\s+/)[0])
+  .filter(Boolean)
+if (runningUnits.length > 0) {
+  const propertiesOutput = Bun.spawnSync([
     'systemctl',
     'show',
-    unit,
-    '--property=WorkingDirectory,ExecStart,MemoryCurrent,UnitFileState,ActiveEnterTimestamp',
+    ...runningUnits,
+    '--property=Id,WorkingDirectory,ExecStart,MemoryCurrent,UnitFileState,ActiveEnterTimestamp',
   ]).stdout.toString()
-  const values = Object.fromEntries(properties.split('\n').filter(Boolean).map(value => {
-    const separator = value.indexOf('=')
-    return separator < 0 ? [value, ''] : [value.slice(0, separator), value.slice(separator + 1)]
-  }))
-  if (!/^\/var\/www\/|^\/opt\/ts-cloud\//.test(values.WorkingDirectory || '') && !/\/var\/www\/|\/opt\/ts-cloud\//.test(values.ExecStart || '')) continue
-  console.log([
-    'SVC',
-    unit,
-    'active',
-    values.MemoryCurrent || '0',
-    values.UnitFileState || '-',
-    values.ActiveEnterTimestamp || '-',
-  ].join('='))
+  for (const properties of propertiesOutput.split(/\n\n+/)) {
+    const values = Object.fromEntries(properties.split('\n').filter(Boolean).map(value => {
+      const separator = value.indexOf('=')
+      return separator < 0 ? [value, ''] : [value.slice(0, separator), value.slice(separator + 1)]
+    }))
+    const unit = values.Id
+    if (!unit) continue
+    if (!/^\/var\/www\/|^\/opt\/ts-cloud\//.test(values.WorkingDirectory || '') && !/\/var\/www\/|\/opt\/ts-cloud\//.test(values.ExecStart || '')) continue
+    console.log([
+      'SVC',
+      unit,
+      'active',
+      values.MemoryCurrent || '0',
+      values.UnitFileState || '-',
+      values.ActiveEnterTimestamp || '-',
+    ].join('='))
+  }
 }
 `;
   return `echo '${Buffer.from(source).toString("base64")}' | base64 -d | bun -`;
@@ -38588,15 +38594,21 @@ EOF`,
     `echo "LOAD=$(cut -d' ' -f1 /proc/loadavg 2>/dev/null || echo 0)"`,
     `echo "LOAD5=$(cut -d' ' -f2 /proc/loadavg 2>/dev/null || echo 0)"`,
     `echo "LOAD15=$(cut -d' ' -f3 /proc/loadavg 2>/dev/null || echo 0)"`,
-    `echo "MEMTOTAL=$(free -m 2>/dev/null | awk '/^Mem:/{print $2}')"`,
-    `echo "MEMUSED=$(free -m 2>/dev/null | awk '/^Mem:/{print $3}')"`,
-    `echo "MEMAVAILABLE=$(free -m 2>/dev/null | awk '/^Mem:/{print $7}')"`,
-    `echo "MEMCACHE=$(free -m 2>/dev/null | awk '/^Mem:/{print $6}')"`,
-    `echo "SWAPTOTAL=$(free -m 2>/dev/null | awk '/^Swap:/{print $2}')"`,
-    `echo "SWAPUSED=$(free -m 2>/dev/null | awk '/^Swap:/{print $3}')"`,
-    `echo "DISKPCT=$(df -P / 2>/dev/null | awk 'NR==2{gsub("%","",$5);print $5}')"`,
-    `echo "DISKUSEDG=$(df -BG / 2>/dev/null | awk 'NR==2{gsub("G","",$3);print $3}')"`,
-    `echo "DISKTOTG=$(df -BG / 2>/dev/null | awk 'NR==2{gsub("G","",$2);print $2}')"`,
+    `read MEMTOTAL MEMUSED MEMAVAILABLE MEMCACHE SWAPTOTAL SWAPUSED <<EOF
+$(free -m 2>/dev/null | awk '/^Mem:/{total=$2; used=$3; available=$7; cache=$6} /^Swap:/{print total, used, available, cache, $2, $3}')
+EOF`,
+    'echo "MEMTOTAL=${MEMTOTAL:-0}"',
+    'echo "MEMUSED=${MEMUSED:-0}"',
+    'echo "MEMAVAILABLE=${MEMAVAILABLE:-0}"',
+    'echo "MEMCACHE=${MEMCACHE:-0}"',
+    'echo "SWAPTOTAL=${SWAPTOTAL:-0}"',
+    'echo "SWAPUSED=${SWAPUSED:-0}"',
+    `read DISKTOTG DISKUSEDG DISKPCT <<EOF
+$(df -BG -P / 2>/dev/null | awk 'NR==2{gsub("G","",$2); gsub("G","",$3); gsub("%","",$5); print $2, $3, $5}')
+EOF`,
+    'echo "DISKPCT=${DISKPCT:-0}"',
+    'echo "DISKUSEDG=${DISKUSEDG:-0}"',
+    'echo "DISKTOTG=${DISKTOTG:-0}"',
     `echo "INODEPCT=$(df -Pi / 2>/dev/null | awk 'NR==2{gsub("%","",$5);print $5}')"`,
     `echo "NETRX=$(awk -F'[: ]+' 'NR>2 && $2!="lo"{sum+=$3} END{print sum+0}' /proc/net/dev 2>/dev/null)"`,
     `echo "NETTX=$(awk -F'[: ]+' 'NR>2 && $2!="lo"{sum+=$11} END{print sum+0}' /proc/net/dev 2>/dev/null)"`,
@@ -43144,7 +43156,7 @@ function authorizationScope(body) {
   const id2 = String(body.scopeId ?? "").trim();
   return id2 ? { type, id: id2 } : undefined;
 }
-async function resolveLiveDashboardData(config6, environment2) {
+async function resolveLiveDashboardData(config6, environment2, options = {}) {
   const mode = resolveDeploymentMode(config6);
   const meta = {
     mode,
@@ -43153,12 +43165,24 @@ async function resolveLiveDashboardData(config6, environment2) {
     project: { name: config6.project.name, slug: config6.project.slug, region: config6.project.region }
   };
   try {
-    const data = mode === "serverless" ? await resolveDashboardData(config6, environment2) : await resolveServerDashboardData(config6, environment2);
+    const data = mode === "serverless" ? await resolveDashboardData(config6, environment2) : await resolveServerDashboardData(config6, environment2, {
+      includeSiteHealth: options.includeSiteHealth
+    });
     return { ...data ?? {}, ...meta };
   } catch {
     return { ...meta };
   }
 }
+function preserveDashboardSiteSnapshot(previous, next) {
+  if (!previous)
+    return next;
+  return {
+    ...next,
+    ...Array.isArray(previous.sites) ? { sites: previous.sites } : {},
+    ...Array.isArray(previous.sitesDetail) ? { sitesDetail: previous.sitesDetail } : {},
+    ...Array.isArray(previous.siteHealth) ? { siteHealth: previous.siteHealth } : {}
+  };
+}
 function resolveUiSourceDir(cwd) {
   const candidates = [
     join13(cwd, "packages", "ui"),
@@ -43512,8 +43536,13 @@ async function startLocalDashboardServer(options = {}) {
   const initialData = await resolveLiveDashboardData(config6, defaultEnvironment);
   const latestDataByEnvironment = new Map([[defaultEnvironment, initialData]]);
   const latestDataRefreshedAtByEnvironment = new Map([[defaultEnvironment, Date.now()]]);
+  const latestSiteHealthRefreshedAtByEnvironment = new Map([
+    [defaultEnvironment, Date.now()]
+  ]);
   const liveDataRefreshesByEnvironment = new Map;
   const dashboardDataMinimumRefreshMs = Math.min(5 * 60000, Math.max(5000, Number(process.env.TS_CLOUD_DASHBOARD_REFRESH_MS) || 30000));
+  const dashboardSiteHealthMinimumRefreshMs = Math.min(30 * 60000, Math.max(60000, Number(process.env.TS_CLOUD_DASHBOARD_SITE_REFRESH_MS) || 5 * 60000));
+  const computeDashboard = resolveDeploymentMode(config6) !== "serverless";
   const refreshLatestDashboardData = (environment2) => {
     const previous = latestDataByEnvironment.get(environment2);
     if (previous && !dashboardDataRefreshDue(latestDataRefreshedAtByEnvironment.get(environment2), Date.now(), dashboardDataMinimumRefreshMs))
@@ -43521,10 +43550,14 @@ async function startLocalDashboardServer(options = {}) {
     const running = liveDataRefreshesByEnvironment.get(environment2);
     if (running)
       return running;
-    const refresh = resolveLiveDashboardData(config6, environment2).then((data) => {
+    const includeSiteHealth = !computeDashboard || dashboardDataRefreshDue(latestSiteHealthRefreshedAtByEnvironment.get(environment2), Date.now(), dashboardSiteHealthMinimumRefreshMs);
+    const refresh = resolveLiveDashboardData(config6, environment2, { includeSiteHealth }).then((refreshedData) => {
       const previous2 = latestDataByEnvironment.get(environment2);
+      const data = includeSiteHealth ? refreshedData : preserveDashboardSiteSnapshot(previous2, refreshedData);
       latestDataByEnvironment.set(environment2, data);
       latestDataRefreshedAtByEnvironment.set(environment2, Date.now());
+      if (includeSiteHealth)
+        latestSiteHealthRefreshedAtByEnvironment.set(environment2, Date.now());
       if (previous2?._serverReachable !== data._serverReachable || previous2?._metricsStatus !== data._metricsStatus || (previous2?.sitesDetail?.length ?? 0) !== (data.sitesDetail?.length ?? 0))
         clearUiCache();
       return data;
@@ -43537,7 +43570,7 @@ async function startLocalDashboardServer(options = {}) {
   const backgroundTelemetryEnabled = options.box && telemetryPreference !== "0" && (telemetryPreference === "1" || !config6.cloud?.attachTo);
   if (backgroundTelemetryEnabled) {
     let telemetryCollectionRunning = false;
-    let nextSiteHealthCollectionAt = 0;
+    let nextSiteHealthCollectionAt = Date.now() + 5 * 60000;
     const collectHostHistory = async () => {
       if (telemetryCollectionRunning)
         return;

package/dist/deploy/index.js

@@ -32,7 +32,7 @@ import {
   synchronizeDashboardUsers,
   trackDashboardOperation,
   verifyStaticApiOrigin
-} from "../chunk-hq03wq2p.js";
+} from "../chunk-8m38yfba.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -65,7 +65,7 @@ import {
   shipsARelease,
   siteInstallBase,
   validateDeploymentConfig
-} from "../chunk-900rezgt.js";
+} from "../chunk-838t87x3.js";
 import"../chunk-1qjyqrc5.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/deploy/local-dashboard-server.d.ts

@@ -48,6 +48,7 @@ export declare function resolveDashboardEnvironment(available: readonly string[]
 export declare function dashboardDataRefreshDue(lastRefreshedAt: number | undefined, now: number, minimumIntervalMs: number): boolean;
 /** Reject browser cross-site mutations while retaining header-light CLI access. */
 export declare function isTrustedMutationRequest(req: Request): boolean;
+export declare function preserveDashboardSiteSnapshot(previous: Record<string, any> | undefined, next: Record<string, any>): Record<string, any>;
 export declare function sanitizeCloudConfig(config: CloudConfig): Record<string, any>;
 export declare function dashboardActions(environment: EnvironmentType): DashboardAction[];
 export declare function resolveDashboardAction(id: string, environment: EnvironmentType): DashboardAction | undefined;

package/dist/drivers/index.js

@@ -68,7 +68,7 @@ import {
   waitForSsh,
   wrapCloudInitUserData,
   writeResizeCheckpoint
-} from "../chunk-900rezgt.js";
+} from "../chunk-838t87x3.js";
 import"../chunk-1qjyqrc5.js";
 import"../chunk-703nkybg.js";
 import"../chunk-4cjrg98a.js";

package/dist/drivers/shared/rpx-gateway.d.ts

@@ -108,6 +108,7 @@ export interface RpxGatewayConfig {
      */
     productionCerts: {
         certsDir: string;
+        certsDirServerNames?: string[];
     };
     /**
      * On-demand TLS (opt-in): lazily issue a real cert for an approved host the

package/dist/index.js

@@ -285,7 +285,7 @@ import {
   volumeCapabilities,
   webhookEndpoint,
   zeroCapacity
-} from "./chunk-hq03wq2p.js";
+} from "./chunk-8m38yfba.js";
 import {
   deleteStaticSite,
   deployStaticSite,
@@ -398,7 +398,7 @@ import {
   waitForCloudInit,
   waitForSsh,
   wrapCloudInitUserData
-} from "./chunk-900rezgt.js";
+} from "./chunk-838t87x3.js";
 import {
   ABTestManager,
   AI,